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Background of Invention 
Field of the Invention 

[0001] The present invention relates to an electronic payment system, a payment 
apparatus and terminals thereof for electronic money transactions or financial 
dealings. More particularly, the present invention relates to processing payments by 
electronic money by validating the payments to prevent improper and fraudulent use. 

Description of the Related Art 

[0002] In a conventional electronic payment system in which the payments on dealings 
are made by electronic money, there are possibilities of falsification and unfair use of 
the electronic money. Thus, the system was configured to use an improved encryption 
technique in order to prevent the disclosure of information regarding the electronic 
money, or to record the information regarding the electronic money on an IC 
(integrated circuit) card so as to allow the use and deposit of the electronic money 
only via an exclusive IC card reader. 

[0003] 

The conventional electronic payment system using electronic money, described 
above, has a problem in that the exclusive IC card reader or a complicated 
authentication and encryption procedure is required so as to enhance security in order 
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to prevent the falsification and unfair use of the electronic money, thus giving up the 
convenience of electronic money. 

Summary of Invention 

[0004] Therefore, it is an object of the present invention to provide a safe and convenient 
electronic payment system using electronic money, which is capable of overcoming 
the above drawbacks accompanying the conventional art. The above and other objects 
can be achieved by combinations described in the independent claims. The dependent 
claims define further advantageous and exemplary combinations of the present 
invention. 

[0005] According to a first aspect of the present invention, an electronic payment system 
that makes electronic money payment relating to a dealing, comprises: a payment 
terminal operable to store a first balance of electronic money for the electronic money 
payment relating to the dealing; a demanding terminal operable to communicate with 
the payment terminal to demand the payment; and a payment apparatus operable to 
communicate with the demanding terminal and to store a second balance of electronic 
money to correspond to an identification number of the payment terminal for 
validating the payment, wherein the demanding terminal receives from the payment 
terminal the first balance stored in the payment terminal and transmits the first 
balance to the payment apparatus, and the payment apparatus detects unfair use of 
the electronic money by checking the first balance stored in the payment terminal, 
which was received from the demanding terminal, with the second balance stored in 
the payment apparatus. 

[0006] According to a second aspect of the present invention, an electronic payment 

system for making payment on a dealing by electronic money, comprises: a payment 
terminal operable to store a first reference number for electronic money for making 
payment on the dealing by the electronic money; a demanding terminal operable to 
communicate with the payment terminal to demand the payment; and a payment 
apparatus operable to communicate with the demanding terminal and to store a 
second reference number to correspond to an identification number of the payment 
terminal for allowing settlement of the payment on the dealing, wherein the payment 
apparatus updates the second reference number in accordance with a predetermined 
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update rule, the payment terminal receives the update rule of the second reference 
number from the payment apparatus and updates the first reference number in 
accordance with the update rule, and in a case where the demanding terminal received 
from the payment terminal the first reference number stored in the payment terminal 
and then transmitted the first reference number to the payment apparatus, the 
payment apparatus checks the first reference number, received from the demanding 
terminal, with the second reference number stored in the payment apparatus to detect 
unfair use of the electronic money. 

[0007] According to a third aspect of the present invention, a payment apparatus that 

communicates with a payment terminal and a demanding terminal to make settlement 
on an electronic money payment for a dealing, the payment terminal being operable 
to store an electronic money balance for making payment on the dealing by the 
electronic money, the demanding terminal being operable to demand the payment on 
the dealing, the payment apparatus comprises: a memory unit operable to store a 
check balance of the electronic money to correspond to an identification number of 
the payment terminal; a communication unit operable to receive, from the demanding 
terminal, a payment amount of the electronic money to be paid by the payment 
terminal; and a processor operable to update the check balance of the electronic 
money stored in the memory unit based on the payment amount received from the 
demanding terminal. 

[0008] In a case where the communication unit received from the payment terminal a 
deposit-requested amount of the electronic money, the processor may update the 
check balance stored in the memory unit based on the deposit-requested amount, 
and the communication unit may transmit a new balance, obtained by the update, to 
the payment terminal. 

[0009] 

The communication unit may receive the electronic money balance for making 
payment on the dealing, when the deposit-requested amount of the electronic money 
is received from the payment terminal, and the processor may compare the electronic 
money balance the communication unit received from the payment terminal with the 
check balance stored in the memory unit, may transmit the new balance to the 
communication unit when the compared balances coincide, and may notify a manager 
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of the payment apparatus of a warning indicating a possibility of unfair use when the 
compared balances do not coincide. 

[0010] The communication unit may receive from the demanding terminal the electronic 
money balance for making payment on the dealing, which is notified from the 
payment terminal, when the communication unit receives, from the demanding 
terminal, the payment amount to be paid by the payment terminal, and the processor 
may compare the electronic money balance the communication unit received from the 
demanding terminal with the check balance stored in the memory unit, may update 
the check balance stored in the memory unit when the compared balances coincide, 
and may notify a manager of the payment apparatus of a warning indicating a 
□ possibility of unfair use when the compared balances do not coincide. 



T r [001 1] In a case where the communication unit received a balance inquiry request from 
□ the payment terminal together with the electronic money balance for making payment 

ni 

on the dealing, the processor may compare the electronic money balance the 
CI communication unit received from the payment terminal with the check balance 

f|f stored in the memory unit, and may transmit a warning indicating a possibility of 

£j unfair use when the compared balances do not coincide. 

ru 

[001 2] The communication unit may transmit a balance inquiry request to the payment 
terminal and may receive the electronic money balance for making payment on the 
dealing from the payment terminal, and the processor may compare the electronic 
money balance the communication unit received from the payment terminal with the 
check balance stored in the memory unit, and may notify a manager of the payment 
apparatus of a warning indicating a possibility of unfair use when the compared 
balances do not coincide. 

[001 3] The memory un j t ma y store a term of validity in relation to the electronic money, 
and in a case where the communication unit received the payment amount of the 
electronic money from the demanding terminal, the processor may not update the 
check balance of the electronic money stored in the memory unit based on the 
payment amount, and may notify a manager of the payment apparatus of a warning 
indicating a possibility of unfair use, when a time that has passed after a start time, at 
which the communication unit transmitted, to the payment terminal, the new balance 
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of the electronic money based on the deposit-requested amount, has gone beyond 
the term of validity. 



UP 

O 

3= 



[0014] The memory unit may store an update time in relation to the electronic money at 
which the check balance of the electronic money was last updated based on a previous 
payment amount, and in a case where the communication unit received the payment 
amount from the demanding terminal, the processor may not update the check 
balance of the electronic money when a predetermined time has not passed after the 
update time based on the previous payment amount. 

[001 5] According to a fourth aspect of the present invention, a payment apparatus that 

P communicates with a payment terminal and a demanding terminal to make settlement 

□ 

Hi on an electronic money payment for a dealing, the payment terminal being operable 

\ % - to store a check reference number for the electronic money for making payment on 

□ the dealing, the demanding terminal being operable to demand the payment on the 

m 

dealing, the payment apparatus comprises: a memory unit operable to store a 

3 

£jj reference number of the electronic money to correspond to an identification number 

ni of the payment terminal; an operation unit operable to update the reference number 

in accordance with a predetermined update rule; a communication unit operable to 
receive, from the demanding terminal, the check reference number of the electronic 
. money, which the demanding terminal was notified from the payment terminal; and a 
processor operable to compare the reference number stored in the memory unit with 
the check reference number received from the demanding terminal to validate the 
electronic money. 

[0016] 

In a case where the communication unit received a deposit request for the 
electronic money from the payment terminal, the communication unit transmits the 
update rule for updating the reference number to the payment terminal. The update 
rule may uniquely determine the reference number based on an initial value and time 
information to provide different reference numbers for different initial values or 
different time information. The time information may be a time that has passed after a 
start time at which the communication unit transmitted the update rule to the 
payment terminal. The initial value may be an irrational number, and the update rule 
may select a number at a decimal place of the irrational number as the reference 
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number, the decimal place being determined based on the time information. 

[001 7] The memory unit may store a number corresponding to the number of times the 
payment terminal performed dealings using the electronic money, the number being 
stored to correspond to the identification number of the payment terminal, and the 
update rule may uniquely determine the reference number based on an initial number 
and the number of times the payment terminal performed dealings in such a manner 
that the reference number is different when the initial value or the number of times is 
changed. 

The memory unit may store a term of validity of the electronic money, and in a 
case where the term of validity has expired, the operation unit may change the update 
rule, the communication unit may transmit the changed update rule to the payment 
terminal, and the processor may update the term of validity stored in the memory 
unit. 

L [0019] 

According to a fifth aspect of the present invention, a recording medium storing a 
[If computer program that enables communication with a payment terminal and a 

Ss[ demanding terminal for making settlement on an electronic money payment for a 

fll dealing, the payment terminal being operable to store an electronic money balance for 

making payment on the dealing, the demanding terminal being operable to demand 
the payment on the dealing, the program comprises: a storing module that enables a 
computer to store a check balance of the electronic money to correspond to an 
identification number of the payment terminal; a communication module that enables 
the computer to receive, from the demanding terminal, a payment amount of the 
electronic money to be paid by the payment terminal; and a processing module that 
enables the computer to update the check balance of the electronic money based on 
the payment amount received from the demanding terminal, wherein the 
communication module enables the computer to receive the electronic money balance 
from the payment terminal when receiving a deposit-requested amount of the 
electronic money from the payment terminal, and the processing module enables the 
computer to compare the electronic money balance received from the payment 
terminal with the check balance, transmit a new balance obtained by the update when 
the compared balances coincide, and notify a manager of the computer of a warning 
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indicating a possibility of unfair use of the electronic money. 



[0020] According to a sixth aspect of the present invention, a recording medium storing 
a computer program for enabling communication with a payment terminal and a 
demanding terminal to make settlement on an electronic money dealing, the payment 
terminal being operable to store a check reference number of electronic money for 
making payment on the dealing by the electronic money, the demanding terminal 
being operable to demand the payment on the dealing, the program comprises: a 
storing module that instructs a computer to store a reference number of the electronic 
money to correspond to an identification number of the payment terminal; an 

M operation module that instructs the computer to update the stored reference number 

CI 

in accordance with a predetermined update rule; a communication module that 
instructs the computer to receive from the demanding terminal the check reference 



tri 

|»b number of the electronic money, which the demanding terminal was notified from the 



D 

fil 



rv 



payment terminal; and a processing module that instructs the computer to compare 
the stored reference number with the check reference number received from the 



y demanding terminal to validate the electronic money, wherein the update rule 

■fii 

a 



uniquely determines the stored reference number based on an initial value and time 
information in such a manner that the stored reference number is changed when the 
initial value or the time information is changed. 

[0021] According to a seventh aspect of the present invention, a demanding terminal that 
communicates with a payment apparatus, which settles electronic money payment on 
a dealing, and a payment terminal, which makes electronic money payment on the 
dealing, the demanding terminal, which demands the payment on the dealing, 
comprises: a first communication unit operable to communicate with the payment 
terminal and to receive a check reference number of the electronic money from the 
payment terminal; a second communication unit operable to communicate with the 
payment apparatus, to transmit the check reference number of the electronic money 
to the payment apparatus, and to receive a result of a validation of the electronic 
money; and a processor operable to calculate a payment amount of the electronic 
money to be paid by the payment terminal and to make the second communication 
unit send the payment amount to the payment apparatus, in a case where the second 
communication unit received a signal indicating that the validation of the electronic 

App_ID=10063 102 Page 7 of 96 



money was successful. 



[0022] The processor may make the first communication unit send the payment amount 
to the payment terminal in a case where the second communication unit received the 
signal indicating that the validation of the electronic money was successful, and the 
processor may make the second communication unit send the payment amount to the 
payment apparatus in a case where the first communication unit received a 
confirmation signal for the payment amount from the payment terminal. 

[0023] The first communication unit may receive, from the payment terminal, an 

electronic money balance, for making electronic money payment on the dealing, 
P stored in the payment terminal, and the second communication unit may send the 

rfi electronic money balance stored in the payment terminal to the payment apparatus 

^ for validating the electronic money balance stored in the payment terminal with a 

P check balance for the electronic money, stored in the payment apparatus. 

5 ^ f 

* [0024] The first communication unit may communicate with the payment terminal by 

s s 
■ssr 

Ul optical communication or short-distance communication to receive from the payment 
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fy 



fit 



terminal an identification number for identifying the payment on the dealing, and the 
second communication unit may communicate with the payment apparatus via a 
telephone line or a private communication line to send the identification number to 
the payment apparatus. 

[0025] In a case where the first communication unit received from the payment terminal 
information regarding a start point, at which a user of the payment terminal started to 
use the electronic money, the processor may calculate the payment amount based on 
a distance moved by the user from the start point. 



[0026] 



According to an eighth aspect of the present invention, a payment terminal for 
communicating with a payment apparatus, which is operable to store a balance of 
electronic money for making settlement on a dealing by the electronic money, and a 
demanding terminal, which is operable to demand the payment on the dealing, the 
payment terminal, which makes the electronic money payment on the dealing, 
comprises: a first communication unit operable to communicate with the payment 
apparatus and to receive, from the payment apparatus, the balance of the electronic 
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money stored in the payment apparatus; a memory unit operable to store the balance 
of the electronic money received by the first communication unit; a second 
communication unit operable to communicate with the demanding terminal and to 
receive a payment amount of the electronic money from the demanding terminal; and 
a processor operable to update the balance of the electronic money stored in the 
memory unit based on the payment amount. 

[0027] The first communication unit may receive the balance of the electronic money 
from the payment apparatus in a case where a deposit-requested amount of the 
electronic money was sent to the payment apparatus. 

□ [0028] The second communication unit may send the balance stored in the memory unit 

P 

m to the payment apparatus for validating the balance, when sending the deposit- 

Ul requested amount of the electronic money to the payment apparatus, and may receive 

M 

r j a new balance from the payment apparatus in a case where the validation of the 



: ;2 



ru 



balance was successful. 



hi [0029] The second communication unit may send the balance stored in the memory unit 

m 

P 

Q which the new balance was received from the payment apparatus, and may receive a 



to the payment apparatus when a predetermined time has passed after a time at 



result of the validation of the balance. 

[0030] The memory unit may store a term of validity of the electronic money, and the 
processor may notify a user of the payment terminal that the electronic money is 
unavailable in a case where a time that has passed after a start time, at which the 
second communication unit received the new balance from the payment apparatus, 
has gone beyond the term of validity. 



[0031] 



According to a ninth aspect of the present invention, a payment terminal that 
communicates with a payment apparatus and a demanding terminal to make payment 
on a dealing using electronic money, the payment apparatus stores a reference 
number of the electronic money for making settlement on the dealing by electronic 
money, the demanding terminal demands the payment on the dealing, the payment 
terminal comprises: a memory unit operable to store a check reference number of the 
electronic money; a first communication unit operable to communicate with the 
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payment apparatus and to receive from the payment apparatus an update rule for 
updating the check reference number stored in the memory unit; an operation unit 
operable to update said check reference number stored in said memory unit in 
accordance with said update rule; and a second communication unit operable to 
communicate with the demanding terminal and to send the check reference number, 
after being updated by the operation unit, to the demanding terminal. 

[0032] The first communication unit may receive from the payment apparatus the update 
rule for updating the check reference number in a case where a deposit-requested 
amount of the electronic money is sent to the payment apparatus. The update rule 
may uniquely determine the check reference number based on an initial value and 
time information in such a manner that the check reference number is changed when 
the initial value or time information is changed. The time information may be a time 
period that has passed after a time at which the update rule was received by the first 
communication unit. The initial value may be an irrational number, and the update 
rule may select a number at a decimal place of the irrational number as the check 
reference number, the decimal place being determined based on the time information. 

[0033] The memory unit may store a number of times that dealings using the electronic 
money were performed, and the update rule may uniquely determine the check 
reference number based on an initial value and the number of times that dealings 
were performed in such a manner that the check reference number is changed when 
the initial value or the number of times is changed. 

[0034] The memory unit may store a term of validity of the electronic money, and in a 
case where the term of validity has expired, the first communication unit may send a 
change request for the update rule to the payment apparatus and may receive a 
changed update rule from the payment apparatus, while the operation unit updates 
the term of validity stored in the memory unit. 

[0035] The first communication unit may communicate with the payment apparatus by 
wireless telecommunication, and the second communication unit may communicate 
with the demanding terminal by optical communication or short-distance wireless 
communication to send an identification number for identifying the payment terminal 
to the demanding terminal. 
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[0036] The second communication unit may receive from the demanding terminal start 
point information regarding a start point at which a user of the payment terminal 
starts to use the electronic money, the memory unit may store the start point 
information, and the second communication unit may send the start point information 
to the demanding terminal so that the payment amount is calculated based on a 
distance moved by the user from the start point, in a case where the user finishes 
using the electronic money. 

[0037] According to a tenth aspect of the present invention, a communication adapter, to 
which a payment terminal for making electronic money payment on a dealing is 
attached, whereby the payment terminal communicates with a charging system for a 
toll road, the communication adapter comprises: a detection unit operable to detect 
an electric wave signal transmitted from the charging system; and a control unit 
operable to make the payment terminal, attached to the communication adapter, 
communicate with the charging system by wireless communication to send the 
charging system a check reference number of electronic money stored in the payment 
terminal for validation of the electronic money, in a case where the electric signal from 
the charging system was detected. 

[0038] The communication adapter may further comprise a sound notification unit 
operable to generate a first sound for notifying a result of the validation of the 
electronic money, in a case where the result of the validation of the electronic money 
was received from the charging system. 

[0039] The payment terminal may send a balance of the electronic money to the charging 
system, and the sound notification unit may generate a second sound for notifying a 
shortage of the balance of the electronic money, in a case where the shortage of the 
balance was notified from the charging system. 

[0040] According to an eleventh aspect of the present invention, a payment terminal for 
communicating with a charging system of a toll road to pay toll by electronic money, 
comprises: a memory unit operable to store a check reference number of the 
electronic money; a detection unit operable to detect an electric wave signal 
transmitted from the charging system; and a communication unit operable to 
communicate with the charging system to send the check reference number, stored in 
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the memory unit, to the charging system, in a case where the detection unit detected 
the electric wave signal. 

[0041 ] The summary of the invention does not necessarily describe all necessary features 
of the present invention. The present invention may also be a sub-combination of the 
features described above. The above and other features and advantages of the present 
invention will become more apparent from the following description of the 
embodiments taken in conjunction with the accompanying drawings. 

Brief Description of Drawings 

[0042] Fig. 1 is a block diagram of an electronic payment system according to a first 
embodiment of the present invention. 

[0043] Fig. 2 shows an exemplary appearance of a register terminal 1 0 in Fig. 1 . 

[0044] Fig. 3 shows an appearance of a mobile phone as an example of a user's terminal 
20 in Fig. 1. 

[0045] Fig. 4 shows an appearance of a hand-held device with a communication function 
as another example of the user's terminal 20 in Fig. 1 . 

[0046] Fig. 5 is a functional block diagram of a synchro server 30 in Fig. 1 . 

[0047] Fig. 6 is a functional block diagram of the register terminal 1 0 in Fig. 1 . 

[0048] Fig. 7 is a functional block diagram of the user's terminal 20 in Fig. 1. 

[0049] Fig. 8 is a flowchart of an electronic money deposit process of the electronic 
payment system according to the first embodiment. 

[0050] Fig. 9 is a flowchart of a user information inquiry process 204 in Fig. 8. 

[0051] Fig. 10 is a flowchart of a user authentication process 206 in Fig. 8. 

[0052] Fig. 1 1 is a flowchart of a balance inquiry process 214 in Fig. 8. 

[0053] Fig. 1 2 explains an exemplary update rule for a reference number according to 
one embodiment of the present invention. 
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[0054] Fig. 1 3 explains another exemplary update rule for the reference number 
according to the present invention. 

[0055] Fig. 1 4 explains still another exemplary update rule for the reference number. 

[0056] Fig. 1 5 is a flowchart of a balance inquiry by the user's terminal 20 in Fig. 1 . 

[0057] Fig. 1 6 is a flowchart of a balance inquiry by the synchro server 30 in Fig. 1 . 

[0058] Fig. 1 7 is a flowchart of an update process for electronic money having an expired 
term of validity by the synchro server 30 in Fig. 1 . 

H ! [0059] Fig. 1 8 is a flowchart of an update process for electronic money having an expired 

□ 

fl term of validity by the user's terminal 20 in Fig. 1 . 

5» 

^ [0060] Figs. 1 9A-1 9C show exemplary screens of a display 802 of the user's terminal 20 

□ in F '9- 1 ■ 

i ^? 

? [0061 ] Fig. 20 is a flowchart of an electronic money payment process of the electronic 

O 

III payment system according to the first embodiment of the present invention. 

[0062] Fig. 21 is a flowchart of an electronic money check process 1 10 in Fig. 20. 

CI 
Fii 



[0063] Fig. 22 is a flowchart of a process 1 1 4 in Fig. 20 for checking a spent amount and 
balance. 

[0064] Fig. 23 is a flowchart of a limit check process 1 1 8 in Fig. 20. 

[0065] Fig. 24 is a flowchart of a paying amount confirmation process 1 24 in Fig. 20. 

[0066] Figs. 25A-25F show further exemplary screens of the display 802 of the user's 
terminal 20 in Fig. 1 . 

[0067] Figs. 26A-26E show exemplary screens of a register-side display 702 of the 
register terminal 10 in Fig. 1. 

[0068] Fig. 27 shows an appearance of a vending machine 1 6 in an electronic payment 
system according to a second embodiment of the present invention. 

[0069] 

Fig. 28 shows an appearance of a parking fee collecting machine in an electronic 
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payment system according to a third embodiment of the present invention. 

[0070] Figs. 29A-29B show an appearance of a ticket inspector in an electronic payment 
system according to a fourth embodiment of the present invention. 

[0071 ] Fig. 30 is a flowchart of an electronic money payment process at a ticket gate of a 
boarding station according to the present invention. 

[0072] Fig. 31 is a flowchart of an electronic money payment process at a ticket gate of 
an exit station according to the present invention. 

[0073] Figs. 32A-32F show further exemplary screens of the display 802 of the user's 
terminal 20 in Fig. 1 . 

[0074] Fig. 33 shows an appearance of a communication adapter in an electronic 
payment system according to a fifth embodiment of the present invention. 



Ul 
Q 

fll [0075] Fig. 34 shows an appearance of a tollbooth exclusive toll bar of a toll road in an 

s 

f»j electronic payment system according to the fifth embodiment of the present 

la* . 

invention. 

«j [0076] Fig. 35 shows a hardware configuration of a general computer 600 according to 
ftf the present invention. 

Detailed Description 

[0077] Exemplary embodiments of the present invention are described below, referring to 
the drawings. 

[0078] (Embodiment 1 )An electronic payment system according to a first embodiment of 
the present invention is described. In the electronic payment system of the present 
embodiment, when a consumer buys goods at a retail store, for example, the 
consumer can make payment electronically by using electronic money. Hereinafter, 
the customer is called a user. As used herein, electronic money is a generic term for 
digital currency. 



[0079] 



Fig. 1 is a block diagram of the electronic payment system of the present 
embodiment. The electronic payment system of the present embodiment includes a 
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register terminal 1 0 as an example of a demanding terminal, a user's terminal 20 as 
an example of a payment terminal, a synchro server 30 as an example of a payment 
apparatus, a carrier server 40, an authentication center 42, a user authentication 
database 44, a register database 50, a deposit management server 54, a deposit 
database 56, a user database 60 and a user's account database 70. 

[0080] The register terminal 1 0 demands payment for dealings by electronic money, 
while the user's terminal 20 makes the payment by electronic money. The synchro 
server 30 communicates with the user's terminal 20 via the carrier server 40, and 
communicates with the register terminal 10 so as to make settlement of the payments 
for dealings by electronic money. 



[0081 ] A communication line 1 8 connects the register terminal 1 0 and the synchro server 
m 30, and may be a telephone line or a private communication line. A wireless 

communication transmission path 28 is an example of a transmission path of wireless 
telephone communication between the user's terminal 20 and the carrier server 40. 



[0082] A communication line 38 connects the carrier server 40 and the synchro server 30, 



ui 

f|| and may be a telephone line or a private line. A short-distance communication 

n 

~l transmission path 68 is one example of a transmission path to be used when the 

ril register terminal 1 0 and the user's terminal 20 make short-distance communication 

with each other. As a short-distance communication technique, optical 
communication, such as infrared communication, or wireless short-distance 
communication, such as Bluetooth, may be used. 

[0083] The register terminal 1 0 calculates the price of the goods that the user bought at 
a retail store, for example, and charges the user for the goods. Fig. 2 schematically 
shows an appearance of the register terminal 10. The register terminal 10 includes a 
customer-side display 700, a register-side display 702, a register body 704, a receipt 
lamp 706, and an infrared communication unit 708 as an example of a short-distance 
communication unit. Moreover, the register terminal 10 has communication 
functionality by being connected to the synchro server 30 via a telephone line or a 
private line, although the function is not shown in Fig. 2. The register terminal 10 can 
access the synchro server 30 by dialup connection via the telephone line or by 
accessing a server gate via the private communication line. 
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[0084] The customer-side display 700 has a display part, such as a liquid crystal display 
(LCD), for displaying character information, on the rear of the register terminal 1 0, 
thereby displaying the total of the prices of the purchased goods and/or stages in the 
electronic payment process so as to notify the user. The register-side display 702 
displays stages in calculation of the prices of the goods and/or the stages in the 
electronic payment process. 

[0085] The receipt lamp 706 is turned on in order to notify that communication from the 
user's terminal 20, described later, is being performed. The infrared communication 
unit 708 performs infrared data communication with an infrared communication unit 
808 (see Fig. 3) of the user's terminal 20 of the user. A wireless short-distance 
communication unit for performing wireless short-distance communication by 
Bluetooth, for example, may be provided in place of the infrared communication unit 
708 so as to perform wireless short-distance data communication with a wireless 
short-distance communication unit of the user's terminal 20. 

[0086] The user's terminal 20 stores electronic money and makes payments by electronic 
money on the goods purchased by the user. As an example of the user's terminal 20, 
a wireless phone device, such as a mobile phone, can be considered. Another 
exemplary user's terminal 20 is a hand-held device such as a PDA (personal digital 
assistant) or a notebook computer, that can perform communication by being 
connected to a wireless communication device, such as the mobile phone. 

[0087] Fig. 3 shows an appearance of a mobile phone that is an example of the user's 

terminal 20. The user's terminal 20 includes an antenna 800, a display 802, operating 
buttons 804, dial buttons 806, an infrared communication unit 808, and an electronic 
money button 81 0. The user's terminal 20 communicates with the carrier server 40 by 
means of the antenna 800 via the wireless communication transmission path 28. The 
user's terminal 20 has a data-packet communication function and can 
transmit/receive digital data. The display 802 displays character information and 
image information transmitted/received by the data-packet communication function. 



[0088] 



The operating unit 804 are buttons used for selection of a menu or buttons 
displayed on the display 802. The dial buttons 806 are used for inputting a phone 
number, a password or the like. The infrared communication unit 808 performs data 
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communication with the infrared communication unit 708 (note Fig. 2) of the register 
terminal 1 0. The user's terminal 20 may include a wireless short-distance 
communication unit that performs wireless short-distance communication, for 
example, by Bluetooth, in place of the infrared communication unit 808, so as to 
perform wireless short-distance data communication with a wireless short-distance 
communication unit of the register terminal 10. 

The user's terminal 20 is connected to the carrier server 40 by the wireless 
communication transmission path 28. The carrier server 40 is connected to the 
synchro server 30 by the communication line 38. Therefore, the user's terminal 20 can 
perform data communication with the synchro server 30. 

Fig. 4 shows a hand-held device 90 having communication functionality that is 
another exemplary user's terminal 20 according to the present embodiment. The 
hand-held device 90 can perform wireless communication when connected to a 
mobile phone 92. A CCD camera 94 can capture an image of the user's face or pupil 
or retina of an eye. A fingerprint detection pad 96 can capture an image of a 
fingerprint of the user. 

The synchro server 30 can communicate with the user's terminal 20 and the 
register terminal 10, and manage and perform the payment operations of the dealings 
between a retail store and the user. The synchro server 30 is connected to the register 
database 50 in which information regarding various register terminals 10 is stored, 
the user database 60 in which information regarding various user's terminals 20 is 
stored, and the user's account database 70 in which information regarding a credit 
account or a bank account is stored for each user, and retrieves necessary information 
from the respective databases. 

[0092] Moreover, the synchro server 30 is connected to the deposit management server 
54, so as to instruct the deposit management server 54 to deposit electronic money, 
make payment by electronic money and the like. The deposit management server 54 
is connected to the deposit database 56, and can retrieve information such as a 
deposit amount of electronic money of the user, the balance, a reference number of 
the electronic money, the term of validity of the electronic money and the like. 



[0089] 
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[0093] The synchro server 30, the deposit management server 54, the deposit database 
56, the register database 50, the user database 60 and the user's account database 70 
may be provided in a network of a credit card company or a bank. Moreover, only the 
user's account database 70 may be provided in the network of the credit card 
company or the bank, while the synchro server 30 is connected to the user's account 
database 70 via a private communication line. 

[0094] A part or all of the functions of the deposit management server 54 may be 

implemented in the synchro server 30. In order to simplify the following description, it 
is assumed that the synchro server 30 performs all the functions of the deposit 
management server 54. 

[0095] The synchro server 30 is connected to the register terminal 1 0 and the user's 



W terminal 20 via a communication network, thereby performing data communication. 

H- 

□ The synchro server 30 acquires information regarding charging of the dealings by 

?§l 

communicating with the register terminal 10. The synchro server 30 also deposits 

CI electronic money, checks the balance and sets the term of validity for the electronic 

Ul 

r 1 1 money, by communicating with the user's terminal 20. 

□ 

□ [0096] Fig. 5 is a functional block diagram of the synchro server 30. The synchro server 

flj 

30 includes a memory unit 80 for storing information regarding electronic money; an 
operation unit 81 for calculating a reference number of the electronic money; a 
payment processing unit 82 for processing a payment operation; the first 
communication unit 84 for handling data communication via the communication line 
1 8; the second communication unit 86 for handling data communication via the 
communication line 38 and the wireless communication transmission path 28; and a 
database retrieving unit 88 for accessing the register database 50, the user database 
60, the user's account database 70 and the deposit database 56 so as to retrieve 
information in the respective databases. 

[0097] j he memor y un j t so stores information indicating the balance, the term of 
validity, or the like, of electronic money. However, the information regarding 
electronic money may be stored in the deposit database 56 so as to correspond to the 
user's terminal 20. In this case, only information regarding electronic money 
corresponding to a certain user's terminal 20 may be retrieved from the deposit 
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database 56 and temporarily stored in the memory unit 80. 

[0098] in a case where the register terminal 1 0 is connected to the synchro server 30 by 
dialup connection, the synchro server 30 may detect a caller number of the register 
terminal 10 and refuse access from phone numbers other than specific caller 
numbers. Moreover, an apparatus that can recognize the caller number may be 
provided at a reception port of the synchro server 30 so as to refuse a connection 
request from phone numbers other than the numbers of specific member stores. 

[0099] Fig. 6 is a functional block diagram of the register terminal 1 0. The register 

terminal 1 0 includes a display 720 for displaying the status of the electronic-money 

but: 

r| payment operation, the balance of electronic money and the like; a processor 722 for 

n 

m performing the electronic-money charging process; the first communication unit 724 

W for handling data communication via the short-distance communication transmission 

p path 68; and the second communication unit 726 for handling data communication 

3|S via the communication line 1 8. 

s 

U j [01 00] Fig. 7 is a functional block diagram of the user's terminal 20. The user's terminal 

^ 20 includes a display 820 for displaying the status of the electronic-money payment 

P 

C| process, the balance of electronic money and the like; a memory 822 for storing the 

? ■■ balance, the term of validity, and the like of electronic money; an operation unit 824 

for calculating the reference number of the electronic money; a processor 826 for 
performing the electronic-money payment process; the first communication unit 828 
for handling data communication via the short-distance communication transmission 
path 68; and the second communication unit 830 for handling data communication 
via the wireless communication transmission path 28. 

[01 01 ] In the electronic payment system using electronic money according to the present 
invention, in order to prevent falsification or unfair use of the electronic money, both 
the user's terminal 20 and the synchro server 30 store the balance and the reference 
number of the electronic money and check or validate the balance and the reference 
number between the user's terminal 20 and the synchro server 30. 



[0102] 



Since the register terminal 1 0 receives the user's terminal number of the user's 
terminal 20 from the user's terminal 20 so as to know the balance of the electronic 



AppJD=10063102 



Page 19 of 96 



money thereof, the register terminal 10 can make improper or unauthorized use of 
the electronic money of the user's terminal 20 by using the user's terminal number 
even though the use of the electronic money is not requested from the user's terminal 
20. Therefore, measures for preventing all unfair use are necessary. 

[01 03] Thus, by comparing the balance of electronic money stored in one of the user's 
terminal 20 and the synchro server 30 with that stored in the other so as to check 
whether or not the compared balances are coincident, unfair use can be detected 
because of a disagreement of the balances, even if the register terminal 1 0 uses the 
electronic money under a situation where the user has no concern with that use. 
Moreover, in a case where the register terminal 1 0 requests payment from the synchro 
server 30, by transmitting a reference number of the electronic money and checking 

:"~8 
«? 

CO the transmitted reference number with the reference number stored in the synchro 

Ul 



ru 



server 30, unfair use can be found because of disagreement of the reference numbers, 



E=P if the register terminal 1 0 unfairly uses the electronic money of the user without 

m 

obtaining the correct reference number from the user's terminal 20. 



U| [0104] As described above, by checking the balance and the reference number, unfair use 

ni 

P can be found because of disagreement of the balance or reference number when the 



user's terminal 20 or the register terminal 1 0 uses the electronic money unfairly, or a 
person other than the user unfairly uses the user's electronic money. 

[0105] The electronic money payment system of the present invention is divided into a 
phase in which the user withdraws electronic money, a phase in which the user 
inquires the balance of electronic money, and a phase in which the user spends 
electronic money and makes payment by electronic money, and those phases are 
described one by one. 

[0106] p jrstj re f err j n g to Figs. 8-1 1 , the deposit process of electronic money in the 

electronic money payment system of the present embodiment is described. Fig. 8 is a 
flowchart of the electronic money deposit process in the electronic money payment 
system of the present embodiment. The processes by the user's terminal 20 and the 
synchro server 30 are shown in the flowchart in term of the passage of time, while 
data communication between the user's terminal 20 and the synchro server 30, via the 
wireless communication transmission path 28 and the communication line 38, are 



App_ID=10063102 

L ■ 



Page 20 of 96 



shown with horizontal arrows. Figs. 9-1 1 are flowcharts showing more details of the 
process in Fig. 8. Moreover, Figs. 19A-19G show exemplary display screens of the 
display 802 of the user's terminal 20. 

[01 07] Referring to Fig. 8, the process in which the user withdraws electronic money and 
deposits electronic money in the user's terminal 20 is described. The user's terminal 
20 can store the amount of the electronic money, and, when the electronic money has 
been newly withdrawn from the user's account database, add the newly withdrawn 
amount to the previously stored balance of the electronic money so as to update the 
stored balance of electronic money. 

□ [01 08] The user selects "ELECTRONIC MONEY WITHDRAWAL" from the menu of the 

CI 

gl electronic money payment, which is exemplified in Fig. 1 9A, thereby starting the 

electronic money withdrawal process (Step 200). The user's terminal 20 is connected 



CI to the synchro server 30, so that it transmits the user's terminal number (Step S202). 

The user's terminal number is an identification number unique to the user's terminal 



ul 20. In a case where the user's terminal 20 is a mobile phone, the user's terminal 

UI 

f I j number may be a caller phone number. The synchro server 30 receives the user's 

y terminal number from the user's terminal 20 and inquires information regarding the 

Li 

fiJ user of the user's terminal 20 based on the user's terminal number (Step 204). 

[01 09] Referring to Fig. 9, the process of inquiring the user information in Step 204 is 
described. The synchro server 30 detects the user's terminal number of the user's 
terminal 20 (Step 2040). The synchro server 30 then accesses the user database 60 
(Step 2042), and checks whether or not user registration for that user's terminal 20 
has been already done (Step 2044). If the user's terminal 20 has not been registered, 
the synchro server 30 transmits a message of "NOT REGISTERED" to the user's terminal 
20 (Step 2046). On the user's terminal 20, a display shown in Fig. 19B is displayed, 
that indicates that the user has not been registered. Then, the synchro server 30 
disconnects the connection to the user's terminal 20 (Step 2048), finishing the 
process. 

[01 10] | n a case w here it was confirmed that the user registration had been done, user 
information is extracted from the user database 60 (Step 2050). The user information 
is information describing the status of the use of electronic money by the user. Then, 
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it is checked whether or not there is any problem with the using status (Step 2052). If 
there is a problem, the synchro server 30 transmits a message of "YOU CANNOT USE 
THIS SERVICE." to the user's terminal 20 (Step 2054). On the user's terminal 20, a 
display shown in Fig. 1 9C is displayed, indicating that the user cannot use the 
electronic payment system. The synchro server 30 then disconnects the connection to 
the user's terminal 20 (Step 2056), finishing the process. 

[01 11] Returning to Fig. 8, the synchro server 30 performs an authentication operation 

for the user of the user's terminal 20 (Step 206). The synchro server 30 communicates 
with the authentication center 42 (note Fig. 1) and performs the authentication 
H operation for the user. The authentication center 42 has a user authentication 



.=3 



□ database 44, and can retrieve and extract authentication information for the 

5? 

M authentication center 42 may be implemented in the synchro server 30. For simplified 



P2 

rii 



authentication operation for the user. A part or all of the functions of the 



description, it is assumed that the synchro server 30 performs the functions of the 



e authentication center 42. 

□ 

»i [01 1 2] A mobile phone, as an example of the user's terminal 20, has a caller phone 
number unique to each mobile phone. The unique caller phone number is used 

0 

rll whenever the user calls someone. The caller phone number is uniquely assigned to 

the mobile phone and it is therefore impossible to make a telephone call from another 
mobile phone by using the same caller phone number. Therefore, as long as the 
mobile phone is used by an owner thereof, the caller phone number of the mobile 
phone can be used as an ID of the user. 

[01 1 3] However, if the owner of the mobile phone loses the mobile phone and a person 
other than the owner uses that mobile phone, it is unclear whether the user of the 
mobile phone is the actual owner of the mobile phone, although the mobile phone can 
be specified uniquely. Thus, in the electronic payment system of the present 
embodiment, data that makes the caller phone number of the mobile phone 
correspond to the actual owner of the mobile phone is stored in the user database 60, 
and it is confirmed whether or not the user of the mobile phone is the owner. 

[01 14] synchro server 30 detects the caller phone number of the user's terminal 20 

when being connected to the user's terminal 20, and retrieves and extracts 
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information regarding the user in the user database 60 based on the caller phone 
number, thereby authenticating the user. As an authentication technique, a visual 
authentication, password authentication, sound authentication or the like can be 
considered. These authentication techniques can be used in combination. 

[01 1 5] In the case of visual authentication, the synchro server 30 extracts photo data of 
the user's face from the user database 60 and transmits it to the register terminal 1 0 
so that a clerk operating the register terminal 1 0 can confirm whether or not the user 
is a registered person. In the case of password authentication, the synchro server 30 
extracts password information from the user database 60 and transmits a password 
request instruction to the user's terminal 20, thereby making the user input the 

CI password and then making the user's terminal 20 transmit the input password. 

St 

: y [01 1 6] The synchro server 30 checks the password thus transmitted with the password 
CI registered in the user database 60, and then transmits the result of the authentication 



to the register terminal 1 0. In the case of sound authentication, audio data obtained 

P when the user speaks a registration word is recorded onto the database in place of the 

hi 

rii password. In this case, the user is prompted to speak the registration word so as to 

input the audio data from the user's terminal 20, so that the audio data is transmitted 

P 

f!j to the synchro server 30. 

[01 1 7] Moreover, in a case where visual authentication is insufficient, for example, the 
accuracy of the authentication can be improved by performing multiple 
authentication, for example, by combining the visual authentication with other 
authentication techniques, such as the password authentication. 

[01 1 8] The process of the user authentication operation in Step 206 is described 

referring to Fig. 10. The synchro server 30 accesses the user authentication database 
44 (note Fig. 1) in order to perform the authentication operation (Step 2060), and then 
extracts information required for the authentication operation (Step 2062). As the 
user authentication information, a password registered by the user, photo data of the 
face, audio data, image data of a fingerprint and image data of an eye pupil or retina 
of the user, and the like can be used. The synchro server 30 initializes a variable n 
that indicates how many times the authentication information is requested to zero 
(Step 2064). 
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[01 1 9] The synchro server 30 then increments n by one (Step 2066), and transmits the 
authentication information request message to the user's terminal 20 (Step 2068). In 
the case where the authentication information is the password, the user's terminal 20 
displays a screen shown in Fig. 1 9D, and the user then inputs the password as the 
authentication information (Step 2070). In the case where the authentication 
information is the audio data, the user inputs sound to the user's terminal. 

[01 20] In the case of inputting sound, a call is made to the authentication center 42, via 
the carrier server 40, so as to transmit the audio data thus input. In the case where 
the authentication information is image data, such as the photo of the face, 
H fingerprint, eye pupil, retina and the like, the user transmits the image data of the 

□ face, fingerprint, eye pupil, retina and the like by using a CCD camera or a fingerprint 



input pad included in or connected to the hand-held device. 



m 
ui 

U 

□ [0121] The user's terminal 20 transmits the authentication information input by the user 

fff 

to the synchro server 30 (Step 2072). The synchro server 30 receives the 
Q authentication information from the user's terminal 20 and then checks the received 

p j authentication information with that registered in the user authentication database 44 

□ (Step 2074). 

CI 



[01 22] If the authentication information transmitted from the user's terminal 20 is not 
correct, it is checked whether or not the number of password requests is larger than 
two (Step 2076). If n is not larger than two, the flow goes back to Step 2066 and 
repeats the request of the authentication information. If n is larger than two, the 
authentication operation is finished (Step 2078) and a message indicating disapproval 
of authentication is transmitted to the user's terminal 20 (Step 2080). The user's 
terminal 20 displays a screen shown in Fig. 1 9E that notifies that the user cannot use 
this service because of failure of authentication (Step 2082). 

[01 23] |f t h e S y nc hro server 30 confirms that the authentication information is correct in 
authentication information checking Step 2074, the authentication operation in Step 
206 is finished. Returning to Fig. 8, the synchro server 30 transmits a signal indicating 
the user has been successfully authenticated to the user's terminal 20 (Step 208). 
Then, a screen shown in Fig. 1 9F for allowing the user to input the amount of 
withdrawal of electronic money is displayed on the user's terminal 20, and the user 
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inputs the amount of withdrawal (Step 210). The user's terminal 20 transmits the 
amount of withdrawal input by the user and the present balance to the synchro server 
30. 

[01 24] The synchro server 30 compares the balance of the electronic money received 
from the user's terminal 20, which has been input to the user's terminal 20 already, 
with the balance of the electronic money recorded in the synchro server 30 so as to 
check whether or not the balances are coincident (Step 214). 

[0125] The process of checking the balances in Step 214 is described referring to Fig. 1 1. 
The synchro server 30 extracts the balance of the electronic money that has been 

III deposited in the user's terminal 20 from the deposit database 56 based on the user's 

□ 

m terminal number of the user's terminal 20 (Step 2130). It is determined whether or not 

lM the balance received from the user's terminal 20 is coincident with the balance stored 

Ci 

m 



in the deposit database 56 (Step 2132). If the balances are not coincident with each 
other, there is a possibility of unfair use. 



PS 



y [01 26] In a case where the balance of the electronic money stored in the user's terminal 

rii 

□ 
rii 



20 is larger than that stored in the deposit database 56, there is a possibility that a 
Ci person other than the user unfairly spent the electronic money and the user has not 

realized the unfair use. Also, there is a possibility that the user forged the balance of 
the electronic money. In such cases, the synchro server 30 transmits a warning 
message indicating the possibility of unfair use to the management center or a 
manager of the electronic payment system of the present embodiment (Step 21 34). 
The synchro server 30 transmits an instruction to stop the use to the user's terminal 
20 (Step 21 36), and disconnects the connection to the user's terminal 20 (Step 21 38), 
finishing the process. 

[0127] Returning to Fig. 8, In a case where the check of the balance in Step 214 was 
successful, the synchro server 30 accesses the user's account database 70 so as to 
withdraw the amount of electronic money specified by the user in Step 210, and then 
adds the withdrawn amount to the present balance of the electronic money, thereby 
updating the balance (Step 216). 



[0128] 



The synchro server 30 transmits the new updated balance to the user's terminal 
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20 (Step 218). The user's terminal 20 receives the new balance, and updates the 
electronic money balance stored in the user's terminal 20 to the new balance (Step 
220). 

[01 29] The synchro server 30 then sets the term of validity of the electronic money (Step 
222). The electronic money is withdrawn from the user's account, then a time at which 
the new, updated balance was transmitted to the user's terminal 20 is set as a start 
time, and then the term of validity is set as a time period or days after the start time. 
For example, the term of validity is set to three days or ten days from the start time. 
The synchro server 30 transmits the start time and term of validity thus set to the 
user's terminal 20 (Step 224). The user's terminal 20 records the start time and the 
term of validity that were received from the synchro server 30 so as to correspond to 
the newly deposited electronic money (Step 226). 

[01 30] The synchro server 30 then sets a new reference number of the electronic money, 
and stores the newly set reference number in the deposit database 56 so as to 
correspond to the electronic money (Step 228). The reference number is calculated 
from an initial value of the reference number and an update rule for updating the 
reference number. The update rule of the reference number is described later. The 
synchro server 30 transmits the initial value and update rule of the reference number 
to the user's terminal 20 (Step 230), thereby finishing the process. 

[0131] The user's terminal 20 records the initial value and update rule of the reference 
number that were received from the synchro server 30 so as to correspond to the 
electronic money (Step 232). The user's terminal 20 displays the new balance of the 
electronic money by a screen shown in Fig. 1 9G (Step 234), thereby finishing the 
process. 

[01 32] In the above deposit process of the electronic money, the user information inquiry 
process 204, the user authentication process 206, the balance check process 214, the 
balance update process 216, the setting of the term of validity 222 and the setting of 
the reference number 228, that are performed by the synchro server 30, are 
performed by the payment processing unit 82 and the database retrieving unit 88 of 
the synchro server 30 (note Fig. 5). 



AppJD=10063102 



Page 26 



[01 33] Moreover, the communication process, that is data communication the synchro 
server 30 performs with the user's terminal 20, including the receipt in Step 202 of 
the user's terminal number from the user's terminal 20, the transmission in Step 208 
of the authentication-approval signal to the user's terminal 20, the receipt in Step 212 
of the withdrawn amount and the present balance from the user's terminal 20, the 
balance update in Step 21 8 to the user's terminal 20, the transmission in Step 224 of 
the start time and term of validity to the user's terminal 20, and the transmission in 
Step 230 of the initial value and update rule of the reference number to the user's 
terminal 20 (note Fig. 8) is handled by the second communication unit 86 of the 
synchro server 30. 

□ [01 34] Next, the reference number of the electronic money is described. In order to 

□ 

gl prevent falsification or unfair use of the electronic money, both the user's terminal 20 

I £ i 

i ; and the synchro server 30 store and manage the reference number of the electronic 

□ money when the electronic money is deposited in the user's terminal 20. The use of 

fit 

the electronic money is allowed only when the reference number of the electronic 
money used by the user's terminal 20 is coincident with that stored in the synchro 

w 

flf serve 30 to correspond to the user's terminal 20. 

& [0135] The same number is not used continuously as the reference number. Instead, the 
reference number is updated at regular intervals. Each of the user's terminal 20 and 
the synchro server 30 stores the initial value of the reference number and the rule for 
updating the reference number, and updates the reference number at regular 
intervals. There is no transmission of the updated reference number between the 
user's terminal 20 and the synchro server 30. 

[01 36] The user's terminal 20 and the synchro server 30 repeatedly update the reference 
number from the initial value based on the update rule independently of each other. In 
a case where the update is performed, for example, every one minute, the reference 
number n minutes after the time at which the electronic money was deposited in the 
user's terminal 20 can be determined uniquely from the initial value and the update 
rule by storing the time of deposit as a start time in both the user's terminal 20 and 
the synchro server 30. 

[01 37] Without knowledge of the initial value and update rule of the reference number, a 
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person other than the user cannot find the reference number that the user's terminal 
20 and the synchro server 30 use. Therefore, it is possible to prevent unfair use of the 
electronic money by the register terminal 1 0 using the user's terminal number of the 
user's terminal 20. Moreover, it is also possible to prevent the falsification and the use 
of the electronic money by another person who pretends to be the user of the user's 
terminal 20 by using the user's terminal number of the user's terminal 20. 

[01 38] An example of the update rule of the reference number is described. Fig. 1 2 

explains an exemplary update rule of the reference number. As the initial number, a 
square root that is an irrational number is used. In this update rule, the n-th decimal 
H= place number of the square root is used as the reference number n minutes after the 

F\ start time. The calculation of decimal places may be cut at an appropriate decimal 

* M place so that the number used in the update rule goes back to the first decimal place. 

m 

M In Fig. 1 2, square roots of 2, 3, 5 and 6 are used and the reference number n minutes 



CI 

m 



after the start time is expressed by the n-th decimal place number of the respective 



e square root. 

CI 

~; [01 39] In the above description, the reference number n minutes after the start time is 

Hi 

P determined while the time of deposit of the electronic money is considered as the 

p 

fl\ start time. Instead of the time that has passed after the start time, the number of 

times of use of the electronic money may be used for updating the reference number. 
More specifically, in a case where the number of times the electronic money was used 
after the electronic money was deposited is n, the n-th decimal place number is used 
as the reference number. 

[01 40] In the case of updating the reference number using the time that has passed after 
the time of deposit of the electronic money, it is necessary to synchronize the clocks 
between the user's terminal 20 and the synchro server 30. However, in the case of 
updating the reference number in accordance with the number of times the electronic 
money is used, the clock synchronization is not necessary. 

[0141] Fig. 13 explains another exemplary update rule. In this update rule, an algorithm 
for generating a random number sequence is used. A seed of the random number 
generation is given as the initial value, and the n-th number in the random number 
sequence continuously generated is used as the reference number n minutes after the 
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start time or that in the n-th uses. As a generation routine of the random number 
sequence, a typical random number algorithm for generating normal random numbers 
or uniform random numbers can be used. Exemplary sequences of the reference 
numbers generated by using the random number generation algorithm are shown in 
Fig. 1 3. When the seed of the random number generation is changed, the series of 
generated random numbers is also changed. Therefore, without the initial value of the 
random value and the random number generation algorithm, the reference number 
cannot be estimated. 

[01 42] By determining in advance a specific random number generation algorithm as the 
H update rule in both the user's terminal 20 and the synchro server 30, the n-th 

f»i reference number can be calculated uniquely from the seed of the random number 



generation given as the initial value. 



f=l [01 43] Fig. 1 4 explains still another example of the update rule. In this example, Hash 
IU function y = h(x) is used as the update rule. The initial value is given as the input of 

Q Hash function h(x), and then a Hash value y is obtained as the output. This output is 

used as the reference number one minute after the start time. Then, Hash value y is 



rii 

P given as the input to Hash function, so as to obtain a new Hash value y. The new Hash 

fy value y is used as a two-minute-after reference number. By repeating these 

processes, Hash values are obtained one after another in accordance with Hash 

function and are then used as the reference numbers. 

[0144] As Hash function, unidirectional Hash function may be used. The unidirectional 
Hash function is Hash function for which it is difficult to obtain the value x that 
provides the function value y in accordance with h(x) = y from the function value y. By 
using the one directional Hash function, it becomes difficult to estimate the Hash 
function even if the sequence of the generated reference numbers is examined. 
Therefore, reference numbers with improved security can be generated. 

[0145] By determining in advance the specific Hash function as the update rule in both 
the user's terminal 20 and the synchro server 30, a reference number n minutes after 
the start time can be calculated uniquely from the initial value. 



[0146] 



As described above, when the user newly withdraws electronic money from the 
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user's bank account or credit card account and deposits the electronic money in the 
user's terminal 20, it is checked whether or not the balance of the electronic money 
already stored in the user's terminal 20 is equal to the balance of the electronic money 
of the user that the synchro server 30 stored in the deposit database 56. This enables 
the detection of unfair use by disagreement of the balances in a case where the 
electronic money was unfairly used. 

[01 47] Next, the phase of checking the balance of the electronic money is described. 
When the user inquires the balance of the electronic money stored in the user's 
terminal 20, the balance of the electronic money can be checked with the balance of 
the electronic money that the synchro server 30 stored in the deposit database 56. 

Up 

CI 

ffl [01 48] Fig. 1 5 is a flowchart of the balance inquiry by the user's terminal 20. When the 
^ user selects the balance inquiry from the menu of the electronic money system of the 

□ user's terminal 20 (Step 240), the user's terminal 20 transmits a request of the 

balance inquiry and the present balance of the electronic money stored in the user's 

P terminal 20 to the synchro server 30. The synchro server 30 checks the balance 

Ui 

m received from the user's terminal 20 with the balance of the electronic money of that 

W user's terminal 20 that was stored by the synchro server 30 in the deposit database 56 

ft) (Step 244). 

[0149] The process of the balance inquiry in Step 244 is the same as the process of the 
balance inquiry in Step 214 shown in Fig. 8. If the balances under check are not 
coincident, there is a possibility of unfair use of the electronic money. Therefore, the 
use of the electronic money is stopped. If the balances are coincident with each other, 
the synchro server 30 transmits the balance-check OK signal to the user's terminal 20 
(Step 246), and then the user's terminal 20 displays the balance of the electronic 
money stored in the user's terminal 20 (Step 248). 

[01 50] | n a case w h ere t he user has inquired the balance of the electronic money, it is not 
always necessary for the user's terminal 20 to check the balance with the balance in 
the synchro server 30. Because the check of the balance requires communication with 
the synchro server 30, the times of the balance inquiry may be reduced in order to 
reduce the communication cost. For example, the balance inquiry may be performed 
only when a predetermined time, for example, three days have passed after the last 
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balance inquiry by the user. 

[0151] By the function of checking the balance of the electronic money when the user has 
inquired the balance, it is possible to prevent unfair use of the electronic money in 
which the user did not use the electronic money, and it is also possible to prevent 
time passing before the user realizes the unfair use. 

[01 52] In the above example, the balance is checked when the user inquired the balance. 
However, the balance may be checked by allowing the user's terminal 20 to voluntarily 
communicate with the synchro server 30 when the electronic money has not been 
used for a long time. As a trigger for causing the user's terminal 20 to check the 



O balance, the fact that a predetermined number of days have passed after the time of 

D 

£11 deposit the electronic money may be used, for example. 



[01 53] Fig. 1 6 is a flowchart of the balance inquiry by the synchro server 30. In the 
flowchart shown in Fig. 1 5, the balance check is performed when the user of the 
user's terminal 20 starts the balance inquiry. However, in the flowchart shown in Fig. 
Uf 16, the balance check is started when the synchro server 30 starts the balance inquiry. 

The synchro server 30 voluntarily checks the balance of the electronic money of the 



Q specific user's terminal 20 with the balance of the electronic money managed by the 

fil 

synchro server 30 in a case where the term of validity of the electronic money has 
expired, a case where the electronic money is suspected to be unfairly used, or the 
like. In this way, the synchro server 30 can automatically make the examination of the 
electronic money that is suspected to be unfairly used to perform the balance check. 

[01 54] Fig. 1 7 is a flowchart of an update process of the electronic money for which the 
term of validity has expired, performed by the synchro server 30. The synchro server 
30 extracts the expired electronic money from the deposit database 56 (Step 260). 
The synchro server 30 resets the reference number of the extracted electronic money 
(Step 262). Then, the synchro server 30 newly determines the initial value of the 
reference number and also sets the update rule for updating the reference number. 
The synchro server 30 transmits the initial value and update rule of the reference 
number thus set to the user's terminal 20 for storing the electronic money (Step 264). 



[0155] 



The user's terminal 20 sets the reference number based on the initial value and 
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update rule that were received (Step 266). The synchro server 30 resets the term of 
validity of the electronic money (Step 268). Also, the start time and the term of validity 
of the electronic money are newly determined and then are recorded in the deposit 
database 56. The synchro server 30 then transmits the start time and term of validity 
thus set to the user's terminal 20 (Step 270). The user's terminal 20 sets the start time 
and term of validity that were received for the electronic money, and records them 
(Step 272). 

[01 56] As described above, the electronic money for which the term of validity has 
expired can be made valid again by resetting the reference number and using the 
u reference number with the new initial value and update rule. This is more 

advantageous as compared with a case where the expired electronic money can be no 



□ 
□ 

gi longer be used and therefore the user has to deposit electronic money again, because 



: ! 

IwJ while the term of validity is set to be relatively short and the update rule is changed in 



the user's burden is reduced. Moreover, also in a case of using the electronic money 



order to ensure the safety, this is advantageous in that the electronic money can be 
continuously used without burdening the user. 



ft! 

5 

□ 

w 

m 

□ [01 57] Fig. 1 8 is a flowchart of an update process of the expired electronic money by the 
ill user's terminal 20. In the flowchart shown in Fig. 1 7, the synchro server 30 extracts 

ru 

the expired electronic money and performs the update process of the electronic 
money of the user's terminal 20 that stores the expired electronic money. On the 
other hand, the flowchart shown in Fig. 1 8 is different from that shown in Fig. 1 7 in 
that the user's terminal 20 detects the expiration of the electronic money stored 
therein, notifies the detection result and makes the synchro server 30 perform the 
update process of the electronic money. 



[0158] 



The user's terminal 20 checks whether or not the term of validity of the electronic 
money has expired (Step 280), and then transmits expiration signal if the term of 
validity has expired (Step 282). The synchro server 30 detects the user's terminal 
number of the user's terminal 20, extracts information regarding the electronic money 
of the user's terminal 20 managed by the synchro server 30, and then performs a 
change of the reference number and reset of the term of validity. The process of the 
change of the reference number and the process of resetting the term of validity 
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(Steps 284 to 294) are the same as those in Steps 262 to 272 in Fig. 1 7 and therefore 
a description is omitted here. 

[01 59] Next, the phase in which the user uses electronic money and pays by the 

electronic money is described. Fig. 20 is a flowchart of an electronic money payment 
process of the electronic payment system of the present embodiment. Figs. 21-24 are 
flowcharts of details of the process in Fig. 20. Fig. 25 shows an exemplary display 
screen of the display 802 of the user's terminal 20. Fig. 26 shows an exemplary 
display screen of the register-side display 702 of the register terminal 10. 

[01 60] Referring to Fig. 20, the electronic money payment process is described. At the 
retail store, the user buys the goods and pays for the goods at the register placed at 
J;( the retail store. The clerk handling the register is requested to process the payment 

by electronic money from the user and then selects the electronic money payment 
menu on the register terminal 10, thereby starting the electronic money payment 
W process (Step 100). The user selects the electronic money payment menu on the user's 

2 

□ terminal 20, thereby starting the electronic money payment (Step 1 01). The user's 

^5 terminal 20 checks whether or not the term of validity of the electronic money stored 

□ in the user's terminal 20 has expired (Step 102). 

n 
bsc- 
[01 61 ] In a case where the term of validity of the electronic money has expired, a screen 

indicating the electronic money cannot be used is displayed on the user's terminal 20. 

After confirming that the term of validity has not expire, the user's terminal 20 

communicates with the register terminal 10 so as to transmit the user's terminal 

number and the reference number and balance of the electronic money (Step 103). For 

the communication between the register terminal 10 and the user's terminal 20, 

infrared communication or short-distance wireless communication can be used. The 

register terminal 1 0 turns on the receipt lamp in order to notify the user and the clerk 

of the start of the communication with the user's terminal 20 (Step 1 04). 

[01 62] T he register 1 0 terminal accesses the synchro server 30 and transmits the user's 
terminal number and the reference number and balance of the electronic money that 
were received from the user's terminal 20 (Step 106). When the register terminal 10 
has accessed the synchro server 30, the synchro server 30 may search the register 
database 50 for information such as a terminal number of the register terminal so as 
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to confirm whether or not the register terminal 10 has been already registered and 
refuse access to a non-registered register terminal. Moreover, the synchro server 30 
may refuse access from a phone number other than a specific caller number by 
checking the caller number when the register terminal 1 0 accesses the communication 
port. 

[01 63] The synchro server 30 checks or validates the electronic money based on the 

user's terminal number and the reference number of the electronic money and balance 
of the electronic money that were received from the register terminal 1 0 (Step 1 1 0). 
Referring to Fig. 21 , the process of checking the electronic money in Step 1 1 0 is 
described. The synchro server 30 searches the deposit database 56 based on the 
user's terminal number and extracts the reference number and balance of the 
electronic money used by the user's terminal 20 (Step 1 1 02). The synchro server 30 
h- compares the reference number received from the register terminal 1 0 with the 

fl'l reference number extracted from the deposit database 56 so as to check whether or 

1. not they are coincident with each other (Step 1 1 06). 

Ci 



u 

o 

£!$ 
W 



[01 64] In a case where they are not coincident, the synchro server 30 transmits a check- 
failure signal to the register terminal 1 0 (Step 1 1 08). The register terminal 1 0 sends 
fit the check-failure signal to the user's terminal 20 (Step 1110) and then displays a 

screen shown in Fig. 26A that indicates the electronic money cannot be used (Step 
1112), thereby finishing the process. The user's terminal 20 displays a screen shown 
in Fig. 25A that indicates that the electronic money cannot be used because of the 
failure in check, on the display of the user's terminal 20 (Step 1114), thereby finishing 
the process. 



[0165] 



In a case where the check of the reference number was successful in Step 1 1 06, 
the synchro server 30 compares the balance received from the register terminal 10 
with the balance extracted from the deposit database 56 so as to check whether or 
not they are coincident with each other (Step 1 1 1 6). In a case where they are not 
coincident, there is a possibility that the electronic money was unfairly used. Thus, a 
warning message indicating the possibility of unfair use is sent to the management 
center (Step 1118). The synchro server 30 transmits the check-failure signal to the 
register terminal 1 0 (Step 1 1 08). In a case where the balance check was successful, 
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the synchro server 30 starts the next process. 

[01 66] Returning to Fig. 20, the synchro server 30 transmits a check-OK signal to the 
register terminal 1 0 when the process of checking the electronic money in Step 1 1 0 
has been finished (Step 1 1 2). The register terminal 1 0 checks the spent amount and 
balance of the electronic money when receiving the check-OK signal (Step 1 1 4). 
Referring to Fig. 22, the process of Step 1 1 4 of checking the spent amount and 
balance of the electronic money is described. The clerk handling the register terminal 
1 0 calculates the total of the purchase amount of the user by means of the register 
terminal 10 and calculates the spent amount of the electronic money. 

asi; 

□ [01 67] The register terminal 1 0 checks whether or not the balance received from the 

PI 

III user's terminal 20 is larger than the spent amount (Step 1 1 40). When the balance does 

U! not cover the spent amount, the register terminal 1 0 displays a screen shown in Fig. 

Lb 

f«i 26B on the display of the register terminal 1 0 so as to notify the clerk of the shortage 

1 ■ of the balance (Step 1142). The register terminal 1 0 transmits a balance-shortage 



signal to the user's terminal 20 (Step 1 1 44). The user's terminal 20 displays a screen 
shown in Fig. 25B so as to notify the user of the shortage of the balance (Step 1 1 46). 



fis 

5 

C) [01 68] Returning to Fig. 20, the register terminal 1 0 transmits the spent amount to the 

fll 

synchro server 30 after confirming that the balance covers the spent amount (Step 
1 16). The synchro server 30 confirms any limitation on the use of the electronic 
money when receiving the spent amount (Step 1 1 8). 

[01 69] The limitation on the use of the electronic money is to limit the use of the 
electronic money during a predetermined time period after the last use of the 
electronic money, for example, for one minute after the last use, and to make the 
electronic money, for which the term of validity after the time of deposit of the 
electronic time has expired, unavailable. 



[0170] 



The reason why successive uses of the electronic money in a short period are 
limited is to prevent unfair use of the electronic money of the user's terminal 20 by 
the register terminal 10 immediately after the register terminal 10 processed the 
previous electronic money payment for the user's terminal 20. In a case where the 
reference number is updated, for example, every one minute, the reference number is 
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not updated for a next use within one minute after the previous use. Therefore, the 
register terminal 1 0 can process the payment by the electronic money by using the 
same reference number as that received from the user's terminal 20 without approval 
of the user's terminal 20. Thus, even if the measure against unfair use that uses the 
reference number is done, the electronic money can be used unfairly. Thus, successive 
uses of the electronic money within a predetermined period has to be limited. 

Referring to Fig. 23, the process of Step 1 1 8 of checking the limitation on the use 
of the electronic money is described. The synchro server 30 searches the deposit 
database based on the user's terminal number and then extracts the start time, the 
last time at which the balance was updated, and the term of validity for the electronic 
money of the user's terminal 20 (Step 1 1 80). The synchro server 30 checks whether or 
not a predetermined time, for example, one minute has passed after the last update 
time of the balance (Step 1 1 82), and transmits a not-available signal to the register 
terminal 10 when the predetermined time has not passed (Step 1 184). 

The register terminal 1 0 sends the not-available signal to the user's terminal 20 
(Step 1 186) and displays a screen shown in Fig. 26C on the display of the register 
terminal 1 0, indicating that the electronic money cannot be used (Step 1 1 88), thereby 
finishing the process. The user's terminal 20 displays a screen shown in Fig. 25C on 
the display of the user's terminal 20, indicating that the electronic money cannot be 
used (Step 1 1 90), thereby finishing the process. 

[0173] 

In a case where the predetermined time has passed after the last update time of 
the balance, it is determined whether the time that has passed after the start time of 
the electronic money goes beyond the term of validity (Step 1 1 92). The user's terminal 
20 checks whether or not the term of validity has expired when the electronic money 
is used in the process of Step 1 02 of checking the term of validity in Fig. 20, and then 
makes the expired electronic money unavailable. Thus, the synchro server 30 is sure 
to receive no request of payment by expired electronic money and therefore the 
detection of expired electronic money in this process (Step 1 192) indicates that the 
electronic money may be unfairly used. In this case, the synchro server 30 sends the 
warning message indicating the possibility of unfair use to the management center 
(Step 1 1 94) and transmits the not-available signal to the register terminal 1 0 (Step 
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1 1 84). 

[01 74] Returning to Fig. 20, when the synchro server 30 has finished the process of Step 
1 1 8 of checking any limitation on the use of the electronic money and confirms that 
the use of the electronic money is not limited, the synchro server 30 transmits an 
available signal to the register terminal 10 (Step 120). The register terminal 10 sends 
the spent amount of the electronic money to the user's terminal 20 (Step 1 22). The 
user's terminal 20 then confirms the paying amount (Step 1 24). Referring to Fig. 24, 
the process of Step 1 24 of confirming the paying amount is described. The user's 
terminal 20 displays the total amount of the purchase by a screen shown in Fig. 25D 

M (Step 1 242). 

□ 



[01 75] The user confirms the total amount of the purchase (Step 1 244), and selects an 

W OK button in a case where the user proceeds with the payment by electronic money. In 

p\ a case where the user wants to cancel the payment, a cancel button is selected. When 

lM the cancel button is selected, the cancel of the payment is shown by displaying a 

3 

Q screen shown in Fig. 25E (Step 1 246). The user's terminal 20 then transmits a cancel 

pj . signal to the register terminal 1 0 (Step 1 248), thereby finishing the process. When 

□ receiving the cancel signal, the register terminal 1 0 displays the cancel of the payment 

=11 by a screen shown in Fig. 26D (Step 1 250), thereby finishing the process. 

[01 76] Returning to Fig. 20, the user's terminal 20 subtracts the paying amount from the 
balance of the electronic money so as to update the balance, and then records the 
new balance (Step 1 26). The user's terminal 20 transmits a payment confirming signal 
to the register terminal (Step 1 28). The register terminal 1 0 transmits the payment 
conforming signal to the synchro server 30 (Step 1 30) and also transmits a bill to the 
user's terminal 20 (Step 1 34), thereby finishing the process. When receiving the 
payment confirming signal from the register terminal 1 0, the synchro server 30 
updates the balance of the electronic money stored in the deposit database 56 (Step 
1 32), thereby finishing the process. The user's terminal 20 receives the bill from the 
register terminal 1 0, and displays the bill by a screen shown in Fig. 25F (Step 1 36). 

[01 77] | n t h e a b ove payment process, the term of validity is checked when the user's 
terminal 20 uses the electronic money, and therefore the user cannot use the 
electronic money in a case where the term of validity has expired. It is preferable that 
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the user is notified that the term of validity has expired before the user uses the 
electronic money. The user's terminal 20 may be configured so that an alarm 
indicating the term of validity has expired is displayed on the display when the term 
of validity of the electronic money has expired. In this way, the user can update the 
electronic money before the use of the electronic money. Moreover, also in a case 
where the electronic money is short, a similar alarm may be displayed by the user's 
terminal 20. In this way, the user can withdraw more electronic money before the user 
uses the electronic money. 

[01 78] In the above payment process, the user's terminal 20 transmits the payment 

5 ; 

confirming signal after updating the balance of electronic money. At the time at which 

CI the payment confirming signal is further sent from the register terminal 1 0 to the 

==11 

y deposit database 56, the synchro server 30 updates the balance of electronic money 

- Ms in the deposit database 56. However, in a case where the communication between the 

CI 

?y user's terminal 20 and the register terminal 1 0 is in a bad condition, the payment 

! as confirming signal cannot be set from the user's terminal 20 to the register terminal 1 0 

Uf after the user's terminal updated the balance of electronic money, so that the payment 

PI 

}l\ is likely to be cancelled. 

5 

f|| [01 79] In such a case, there may arise an inconsistency in the balance of electronic 

money stored in the synchro server 30 with the balance of electronic money stored in 
the user's terminal 20. Thus, before the user's terminal 20 updates the balance of 
electronic money, the user's terminal 20 transmits the payment confirming signal to 
the register terminal 1 0, and the register terminal 1 0 sends back a confirming signal 
that confirms that the payment confirming signal from the user's terminal 20 was 
received. The user's terminal 20 updates the balance of electronic money in a case 
where the user's terminal 20 received the confirming signal from the register terminal 
10. In this way, it is possible to prevent disagreement of the balance of electronic 
money between the user's terminal 20 and the synchro server 30. 

[0180] 

In the electronic money payment system of the present embodiment, it is possible 
to prevent unfair use by checking the balance and reference number of the electronic 
money stored in one of the user's terminal 20 and the synchro server 30 with those 
stored in the other when the deposit of electronic money, the balance inquiry and the 
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payment are performed. Other than the above, a mechanism is provided for checking 
inconsistency of electronic money by an automated check of the electronic money by 
the synchro server 30. 

[01 81] The synchro server 30 may search the deposit database 56 so as to extract 

electronic money for which the term of validity has expired and may check up the 
payment records, the log of uses, records of deposits and withdrawals in the user's 
account database 70 so as to check the existence of any inconsistency. Moreover, the 
synchro server 30 may communicate with the user's terminal 20 that deposited 
electronic money if necessary, to inquire the balance recorded in that user's terminal 

H 20, so that the balance in that user's terminal 20 is compared with the balance 

f s 

□ recorded in the deposit database 56. 

m 

W [01 82] In the description of the above payment process, after receiving the payment 

□ confirming signal from the register terminal 1 0, the synchro server 30 may extract a 

Hi 

part of attribute information related to the user of the user's terminal 20 that made 

CI this payment from the user database 60 and transmit the extracted information to the 

LI 

PH register terminal 1 0. The user's attribute information transmitted to the register 

W terminal 10 is information regarding attributes of the user, such as sex or age. It is 

P 

f|| preferable that this attribute information not contain personal information such as 

name, address and a credit card number. 

[01 83] The register terminal 1 0 may acquire the information related to the user who 
made this payment and accumulate the detail of the goods purchased and the user 
information as a purchase history in a database of the retail store. Therefore, the retail 
store can extract the purchase action of the user such as an age bracket of user's who 
purchase a certain item, from the purchase history information accumulated in the 
database, so that the retail store can use the extracted information for marketing. 

[01 84] Although the synchro server 30 receives the spent amount of electronic money 

from the register terminal 10, the synchro server 30 may receive detailed information 
regarding the purchased item such as the name or unit price together with the spent 
amount and record the received information in the user database 60 as the user's 
purchase history. In this manner, the user's terminal 20 can inquire the user's 
purchase history to the synchro server 30 and receive the purchase history from the 
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synchro server 30. 



[01 85] The functions and operations of the payment process of the electronic money 
payment system of the present embodiment are described above. If any trouble of 
communication occurs in the transactions of the aforementioned payment, for 
example, the stop of communication, the information involved with all the processes, 
temporal data and the like are initialized, thereby finishing the process. 

[01 86] In the above payment process of Fig. 20, the process of checking electronic 

money in Step 1 10, the confirming process of the spent amount limit in Step 1 18 and 
the process of updating the balance of electronic money in Step 1 32, that are 

□ performed by the synchro server 30, are handled by the payment processing unit 82, 

r| 

5 

Li 



the operation unit 81 and the database retrieving unit 88 of the synchro server 30. 



[01 87] The communication such as the receipt in Step 1 06 of the user's terminal number, 
the reference number and the balance from the register terminal 1 0, the transmission 



CI 

ru 

5 in Step 1 1 2 of the check-OK signal to the register terminal 1 0, the receipt in Step 1 1 6 

□ 

hi of the spent amount from the register terminal 1 0, the transmission in Step 1 20 of the 

|jif available signal to the register terminal 1 0 and the receipt in Step 1 30 of the payment 

Q confirming signal from the register terminal 1 0, that are data communication 

performed by the synchro server 30 with the register terminal 1 0, are handled by the 
first communication unit 84 of the synchro server 30. 

[01 88] In the electronic payment system of the present embodiment, both the user's 
terminal 20 and the synchro server 30 store the balance and reference number and 
check up the balances and reference numbers with each other. Therefore, it is 
possible to detect unfair use, thereby realizing the electronic payment process using 
electronic money with high reliability. Moreover, the mobile phone and the hand-held 
device that can perform communication by being connected to the mobile phone or 
the like have portability that the user can carry them everywhere and convenience that 
the communication can be performed by using wireless telecommunication 
everywhere. Thus, the electronic payment system of the present embodiment enables 
safe and convenient electronic payment with high reliability. 

[01 89] 

(Embodiment 2)The electronic payment system according to a second 
AppJD=10063102 Page 40 of 96 



embodiment of the present invention is described. In the electronic payment system 
according to the present embodiment, the payment on the purchased goods can be 
made by electronic money when the user buys the goods from a vending machine. 

[01 90] The electronic payment system of the present embodiment has the same structure 
as that in the first embodiment except that a vending machine is used as the claiming 
or demanding terminal in place of the register terminal 10 and therefore a detailed 
description is omitted here. 

[0191] Fig. 27 shows an appearance of a vending machine 1 6 of the present 

embodiment. The vending machine 1 6 has buttons 900 for allowing selection of 
O items, a short-distance communication unit 902, a coin insertion part 904 through 

m which a coin can be inserted, and a discharge opening 906 for the purchased item. 

W The short-distance communication unit 902 performs communication by infrared 

□ communication or short-distance wireless communication with a short-distance 



ru 



U2 



communication unit of the user's terminal 20. The vending machine 1 6 can 



O communicate with the synchro server 30 via the communication line 1 8. As the 

i=l | communication method from the vending machine 16 to the synchro server 30, any 



communication technique of communication via a telephone line, communication via a 

O 

flj private line and wireless telecommunication may be used. 

[01 92] The electronic money payment process of the present embodiment is the same as 
the payment process of the first embodiment except that the purchased item is 
discharged through the discharge opening 906, and therefore the detailed description 
thereof is omitted here. 

[0193] (Embodiment 3)The electronic payment system according to a third embodiment 
of the present invention is described. In the electronic payment system according to 
the present embodiment, the user can pay for a parking fee by electronic money at a 
gate when entering a parking lot or exiting from the parking lot. 

[01 94] The electronic payment system of the present embodiment has the same structure 
as that in the first embodiment except that a parking fee collecting machine is used as 
an exemplary claiming or demanding terminal and therefore a detailed description of 
the same structure is omitted here. 
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[01 95] Fig. 28 shows an appearance of a parking fee collecting machine 22 of the present 
embodiment. The parking fee collecting machine 22 has a display 914 for displaying 
the parking fee, a short-distance communication unit 91 6 for communicating with the 
short-distance communication unit of the user's terminal 20, a gate 910, and a 
crossing gate 91 2. In addition, the parking fee collecting machine 22 includes a part 
operable to communicate with the synchro server 30 via a telephone line, a private 
line or wireless communication. 

[01 96] The electronic money payment process of the present embodiment is the same as 
the payment process of the first embodiment except that the gate opens after the 
payment by the electronic money has been finished, and therefore a detailed 
description is omitted here. 



[01 97] (Embodiment 4)The electronic payment system according to a fourth embodiment 
p of the present invention is described. In the electronic payment system of the present 

embodiment, the user can pay for railway fare by electronic money at a ticket gate. 

5 

l\l [01 98] In the electronic payment system of the present embodiment, a ticket inspector is 
J J; used as an example of the claiming terminal. Figs. 29A-29B show an appearance of 

C? the ticket inspector 1 2. The ticket inspector 1 2 includes a wireless communication 

port 920 for communicating with a short-distance communication unit of the user's 
terminal 20 of the user, an on-receiving lamp 922 for indicating a status of the 
communication with the user's terminal 20, a receipt-completion lamp 924, the first 
sensor 926 for detecting that the user passes through the gate, the second sensor 
928 and the gate 930. It is assumed that the user passes through the ticket gate at 
Station A, gets on a train, gets off the train at Station B, passes through the ticket gate 
at station B and pays for the fare by electronic money. 

[01 99] Fig. 30 is a flowchart of the electronic money payment process at the ticket gate 
of the boarding station. The user pushes an electronic money button of the user's 
terminal 20 at the ticket gate of the boarding station, thereby starting wireless 
communication between the wireless communication port 920 of the ticket inspector 
12 and the user's terminal 20 (Step 300). The user's terminal 20 transmits the balance 
of electronic money to the ticket inspector 1 2 (Step 302). The ticket inspector 1 2 
confirms that the balance received from the user's terminal 20 is larger than the 
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minimum fare (Step 306). In a case where the balance does not cover the minimum 
fare, a signal indicating the shortage of the balance is transmitted to the user's 
terminal 20. 

[0200] A screen shown in Fig. 32B is then displayed on the user's terminal 20 but the 

gate does not open. In a case where the balance covers the minimum fare, the ticket 
inspector 12 transmits information regarding the boarding station to the user's 
terminal 20 (Step 308). The user's terminal 20 then displays the boarding station 
information by a screen shown in Fig. 32A. A train icon 932 on the display screen 
indicates that the user is on board the train and the payment has not been finished 



inspector 12 after displaying the boarding station information (Step 312). The ticket 



M yet. The user's terminal 20 sends back the receipt-completion signal to the ticket 

□ 

a 

0' inspector 12 turns on the receipt-completion lamp 924 (Step 314) and opens the gate 

Ul 

U (Step 316). 



[0201] Fig. 31 is a flowchart of the electronic money payment process at the ticket gate 
□ of the exit station. The user pushes the electronic money button on the user's 

!?! terminal 20, thereby staring communication with the wireless communication port 

III 

O 920 of the ticket inspector 1 2 (Step 320). The user's terminal 20 transmits the balance 

CI! 

fll and reference number of the electronic money and the boarding station information to 

the ticket inspector 1 2 (Step 322). The ticket inspector 1 2 turns on the on-receiving 
lamp 922 (Step 324). The ticket inspector 1 2 transmits the user's terminal number, 
the reference number and the balance received from the user's terminal 20 to the 
synchro server 30 (Step 326). The synchro server 30 checks the balance of the 
electronic money (Step 328). 

The process of checking the electronic money in Step 328 is the same as the 
process of Step 1 1 0 of checking the electronic money in the first embodiment and 
therefore a detailed description thereof is omitted here. In a case where the check of 
the electronic money was not successful, a screen shown in Fig. 32E is displayed on 
the user's terminal and the payment by electronic money cannot.be done, so that the 
gate of the ticket inspector 1 2 does not open. In a case where the check of the 
electronic money was successful, the synchro server 30 transmits the check-OK signal 
to the ticket inspector 1 2 (Step 330) and confirms the spent amount and the balance 



[0202] 



App_ID=10063102 



Page 43 of 96 



(Step 332). 

[0203] The ticket inspector 1 2 calculates the fare from the boarding station to the exit 
station by using the information regarding the boarding station received from the 
user's terminal 20, thereby calculating the spent amount. The process to check the 
spent amount and balance in Step 322 is the same as the process in Step 1 1 4 in the 
first embodiment shown in Fig. 20. In a case of shortage of the balance, a screen 
shown in Fig. 32F is displayed on the user's terminal 20, the payment by electronic 
money cannot be done, and the gate of the ticket inspector 1 2 does not open. 

[0204] After the confirmation of the spent amount and balance, account information is 
sent to the user's terminal 20 (Step 334). The user's terminal 20 displays the account 
information received from the ticket inspector 1 2 by a screen shown in Fig. 32D (Step 
336). On the display, the names of the boarding station and exit station, the fare from 
the boarding station to the exit station, and the balance of electronic money in a case 
of paying for the fare by electronic money are displayed. 

[0205] The user's terminal 20 updates the balance of electronic money (Step 337) after 
displaying the account information, and then transmits an account-information 
receipt signal to the ticket inspector 1 2 (Step 338). The ticket inspector 1 2 sends the 
spent amount to the synchro server 30 (Step 342) after receiving the account- 
information receipt signal from the user's terminal 20, and then opens the gate (Step 
344). The synchro server 30 updates the balance of electronic money stored in the 
deposit database 56 (Step 346) when receiving the spent amount from the ticket 
inspector 1 2. 

[0206] (Embodiment 5)The electronic payment system according to a fifth embodiment of 
the present invention is described. In the electronic payment system of the present 
embodiment, the user can pay for toll of a toll road, such as a speedway, by electronic 
money. 



[0207] 



In the electronic payment system of the present embodiment, a communication 
adapter to which a mobile phone is attached, as an example of the claiming terminal, 
is used. Fig. 33 shows an appearance of the communication adapter 14. The 
communication adapter 14 includes an antenna 950 for detecting an electric wave 
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signal, a speaker 952, a hand-held device cradle 954, a toll-booth signal detection 
lamp 956 and a pass-OK lamp 958. The user provides the communication adapter 14 
on a dashboard of a car and the like and places the user's terminal 20 on the cradle 
954 to be connected to the cradle. 954. 

[0208] Fig. 34 shows an appearance of a charging system for the toll road. The toll-road 
charging system includes a communication tower 960 and an exclusive tollgate 962 at 
a toll booth. The communication tower 960 is placed before the toll booth so as to 
transmit the electric wave signal. The exclusive tollgate is exclusive to the payment by 
electronic money, and has a sensor 964 and a monitor camera 966. 



[0209] When the car the user is on board approaches the communication tower 960 and 



□ 

□ reaches a point several hundred meters away from the communication tower 960, the 

Eft 

y communication adapter 14 detects the electric wave signal transmitted from the 



communication tower 960, by means of the antenna 950, and then automatically 
f|! starts communication by the user's terminal 20, so as to transmit the user's terminal 

f-l number and the reference number and balance of the electronic money from the 

ill user's terminal 20 to the communication tower 960. The electronic-money checking 

ft J • 1 

pi process performed by the communication tower 960 is the same as the electronic- 

Ill money checking process by the register terminal 1 0 in the first embodiment, and 

therefore a detailed description thereof is omitted here. 

[021 0] While the communication tower 960 is checking the electronic money, the 

tollbooth-signal detection lamp 956 of the communication adapter turns on and off, 
thereby notifying the user that the car approaches the toll booth and the electronic 
money payment process is being performed. This notification to the user may be 
made by an audio message by means of the speaker 952. 

[02 11] |f t p, e c heck of the electronic money was successful, the communication tower 960 
transmits the check-OK signal to the communication adapter 14 or the user's terminal 
20. The communication adapter 14 then turns the pass-OK lamp 958 on, thereby 
notifying the user that the car has been permitted to pass through the exclusive 
tollgate 962 for the payment by electronic money at the toll booth. Moreover, the 
notification to the user may be simultaneously performed by an audio message by 
means of the speaker 952, which is one example of a sound notification unit. In this 
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way, the user can go into the exclusive toll bar 962 without interrupting the drive. 

[021 2] In a case where the check of the electronic money was not successful, the 

communication tower 960 transmits the check-failure signal to the communication 
adapter 14 or the user's terminal 20. The communication adapter 14 switches the 
state of the tollbooth signal detection lamp 956 so that the lamp 956 is lighted, 
thereby notifying the user that the car cannot pass through the exclusive tollgate 962. 
Moreover, the notification to the user may be simultaneously made by an audio 
message by means of the speaker 952. In this way, the user gives up the payment by 
electronic money and can go into a general tollgate at the toll booth without 
interrupting the drive. 

[02 1 3] The communication tower 960 may compare the balance of the electronic money 
in the user's terminal 20 with the toll of the toll road so as to check whether or not the 
balance can cover the toll, and transmits a signal notifying the user of shortage of the 
balance to the user's terminal 20 in a case of shortage of the balance. In a case where 
the user's terminal 20 received the signal of shortage of the balance, the 
communication adapter 14 may switch the state of the tollbooth signal detection lamp 
956 so that the lamp 956 is lighted, and notify the user by the audio message via the 
speaker 952 that the car cannot pass through the exclusive tollgate 962. In this way, 
the user can go into the general tollgate without interrupting the drive. 

[0214] When the user's car enters the exclusive tollgate 962, the sensor 964 provided at 
the entrance of the exclusive tollgate 962 detects a signal from the communication 
adapter 14 and receives the user's terminal number of the user's terminal 20 from the 
communication adapter 1 4. The sensor 964 determines whether or not the 
communication adapter 14 of the user received permission to pass based on the 
user's terminal number, and allows the car to pass in a case where the communication 
adapter 14 received the passing permission. 

[021 5] The communication tower 960 may communicate with the exclusive tollgate 962 
by wireless communication or by connection by a private line, a telephone line or the 
like. Thus, the exclusive tollgate 962 may receive the user's terminal number of the 
user's terminal 20 of the communication adapter 14 that has been permitted to pass 
by the communication tower 960 and check the received user's terminal number with 
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the user's terminal number that the sensor 964 received from the communication 
adapter 14. 

[0216] In a case where there is no communication means between the communication 

tower 960 and the exclusive tollgate 962, the communication tower 960 may transmit 
the user's terminal number of the communication adapter 14 that has been permitted 
to pass, to the synchro server 30 so as to make the synchro server 30 store the 
transmitted user's terminal number. The exclusive tollgate 962 may transmit to the 
synchro server 30 the user's terminal number the sensor 964 received from the 
communication adapter 1 4 so as to make the synchro server 30 check the transmitted 
user's terminal number with the user's terminal number that the synchro server 30 
received from the communication tower 960. 

[021 7] When the car has passed through the gate, payment information is transmitted to 
the user's terminal 20 and the synchro server 30 and the balance of the electronic 
money stored in the deposit database 56, thereby finishing the communication. 

[02 1 8] In a case where a car with no permission to pass or a car that includes no 

electronic money payment apparatus has passed through the exclusive tollgate 962, 
the sensor 964 detects the passing with no permission and the monitor camera 966 
takes a picture of a car number or the drivers face, so that the penalty or toll can be 
demanded later. 

[021 9] In the above example, the toll is constant. However, in a case where the toll is not 
constant but increases with the distance of the toll road on which the user drove the 
car, the user has to start the payment by electronic money at the tollgate on the start 
point of the toll road, to store the start point in the user's terminal 20, and to pay the 
fee in accordance with the distance by electronic money at the tollgate on an exit 
point of the toll road. In this case, a payment process that is similar to that in the case 
of the ticket inspector in the fourth embodiment can be used. 

[0220] 

In the above example, the user's terminal 20 is attached to the communication 
adapter 14. However, the user's terminal 20 may have a part or all of the functions of 
the communication adapter 14. The user's terminal 20 may include a detection unit 
that detects the electric wave signal transmitted from the communication tower 960, 
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and may start to communicate with the communication tower 960 automatically in a 
case where the detection unit detected the electric wave signal from the 
communication tower 960, so as to transmit the user's terminal number and the 
reference number and balance of the electronic money to the communication tower 
960. 

[0221] In the above example, the communication tower 960 checks the electronic money 
and the balance and gives the user's car the permission to pass; the exclusive tollgate 
962 of the toll booth allows the user's car to which the permission has been given to 
pass; and the synchro server 30 updates the balance of the electronic money of the 
user who passed through the exclusive tollgate 962. However, the embodiment of the 
charging system is not limited thereto. The exclusive tollgate 962 of the toll booth 
may perform a part of the functions of the communication tower 960. For example, 



h 
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Efl 
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H the exclusive tollgate 962 may communicate with the user's terminal 20 so as to 

CI 

r|| check the electronic money and confirm the balance. 

5 

P [0222] In the fourth and fifth embodiments, the payment cannot be cancelled when the 

UJ 

fij user confirms the paying amount, unlike the first embodiment. Instead, in the fourth 

and fifth embodiments, the accounting information is displayed on the user's terminal 



P 
O 

f|| 20 and, immediately after this, the balance of electronic money is updated. In 



[0223] 



particular, in a case where the car passes through the expressway toll booth, when the 
payment is cancelled, the car cannot pass through the tollgate of the toll booth, 
causing some troubles. Thus, the cancel of the payment by the user is not preferable. 
In such a case, only the confirming process of the account information is performed 
and thereafter the payment process has to be made to progress. 

However, it is necessary to enable the user to contact the management center 
when the toll is wrong, so that the management center can deal with this fact later. 
Thus, it is desirable that the synchro server 30 record the logs of the user of 
electronic money in detail. Although only the information indicating the spent amount 
of the electronic money is sent from the ticket inspector 1 2 or the communication 
adapter 1 4 to the synchro server 30 in the flowchart of the payment by electronic 
money, information such as the date and time at which the user used electronic 
money, the name of the station, the name of the tollbooth may be sent in addition to 
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the information indicating the spent amount so that the synchro server 30 records the 
history of the use of electronic money for the user. In this way, when the user contacts 
the management center with a complaint later, the management center can check the 
use history. 

[0224] (Embodiment 6)The synchro server 30 as an example of the payment apparatus in 
the electronic payment system of the first, second, third, fourth and fifth 
embodiments may be implemented by a general computer. Fig. 35 is a block diagram 
showing an exemplary hardware configuration of the general computer 600. In the 
computer 600 shown in Fig. 35, a CPU 602 operates based on at least one program 
stored in ROM 604 and RAM 606. Via an input device 608, an administrator of the 



insb 

o ■ 

Q synchro server 30 can input data and commands. A hard disk drive 61 0 as an example 



of a storage device stores setting information and the program for the operation of 
the CPU 602. 



[0225] A floppy disk drive 61 4 reads data or program from a floppy disk 624 to provide 
the read data or program to the CPU 602. A CD-ROM drive 61 6 reads data or program 



s 

CI 

ry from a CD-ROM 626 to provide the read data or program to the CPU 602. The first 

6 
o 



communication interface 61 8 performs data transmission/receiving while being 
f|| connected to the communication line 18. The second communication interface 620 

performs data transmission/receiving while being connected to the communication 
line 38. 

[0226] A database interface 61 2 can be connected to various types of database 622 to 

perform data transmission and data receiving therewith. Moreover, the synchro server 
30 has an interface for connecting the synchro server 30 to a display 628. The 
administrator can monitor the operation status of the synchro server 30 and confirm 
the setting information of the synchro server 30 by means of the display 628. 

[0227] The software executed by the CPU 602 is provided to the user while being stored 
in a recording medium such as the floppy disk 624 or the CD-ROM 626. The software 
stored in the recording medium may be compressed or not-compressed. The software 
is installed from the recording medium into the hard disk drive 610 and is then read 
onto the RAM 606, so that the CPU 602 executes the software. 
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[0228] The program provided while being stored in the recording medium, that is the 
program to be installed into the hard disk drive 610, functionally includes a storing 
module, an operation module, a payment processing module, the first communication 
module, the second communication module, and a database retrieving module. 

[0229] The processes that are to be performed by the CPU 602 in accordance with 

instructions to the computer 600 from the storing module, the operation module, the 
payment processing module, the first communication module, the second 
communication module and the database retrieving module are the same as the 
functions and operations of the memory unit 80, the operation unit 81, the payment 
processing unit 82, the first communication unit 84, the second communication unit 

b 



□ 



86 and the database retrieving unit 88 in the synchro server 30 in the first, second, 



Lil 
[If 
tl 



C s m third, fourth and fifth embodiments, respectively, and therefore a detailed description 

U! 

u thereof is omitted here. 

rl 

n? [0230] A part or all of the functions and operations of the synchro server 30 as an 
p example of the payment apparatus according to all the embodiment described in the 

present application can be stored in the floppy disk 624 or the CD-ROM 626 as an 
example of the recording medium shown in Fig. 35. Moreover, in a case where a part 
pi- of the operations of the register terminal 10 described in the above embodiments is 

performed by the synchro server 30 in place of the register terminal 1 0, the part of 
the operations of the register terminal 1 0 can also be stored in the floppy disk 624 or 
the D-ROM 626. 

[0231] These programs may be read directly into the RAM from the recording medium so 
as to be executed, or read into the RAM after being installed into the hard disk drive 
from the recording medium, so as to be executed. Moreover, the above-mentioned 
programs may be stored in a single recording medium or a plurality of recording 
media. Furthermore, the programs may be stored while being encoded. 

[0232] £ S the recording medium, other than the floppy disk and the CD-ROM, an optical 
recording medium such as a DVD or a PD, a magneto-optical recording medium such 
as an MD, a tape-like medium, a magnetic recording medium, or a semiconductor 
memory such as an IC card or a miniature card can be used. Moreover, a storage 
device such as a hard disk or a RAM provided in a server system connected to an 
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exclusive communication network or the Internet may be used as the recording 
medium, so that the program can be provided to the synchro server 30 through a 
communication network. Such a recording medium is used only for manufacturing the 
synchro server 30 and it is therefore apparent that the manufacture, sale and the like, 
of such a recording medium on business constitute infringement of a right based on 
the present application. 

[0233] As described above, according to the electronic payment system of the present 
invention, a user can store electronic money in a hand-held terminal and can make 
payments by electronic money with safety and convenience in various situations, for 
example, at the retail store, at a place where a vending machine is provided, at the 
parking fee collecting machine, at the railway ticket inspector, or at the toll booth of a 



following advantages. The user can make payment by electronic money anywhere and 
anytime the user buys something by carrying with the user a mobile phone, that is a 
communication device excellent in portability. Thus, it is unnecessary to carry cash, a 
credit card, a cash-card, an IC-money card or the like. Moreover, the user can confirm 
the status of direct debit or available balance of the user's account, shopping history 
or the like by using a data packet communication function of the mobile phone. 

[0235] In addition, the electronic payment system provides the retail store with the 
following advantage. The burden on the clerk who operates the register can be 
reduced because the payment can be made safely and conveniently by electronic 
money stored in the mobile phone without inquiry of the card number to the credit 
card company, like in the case of a credit-card payment. Moreover, no dedicated 
reader for the credit card or an IC card that stores electronic money is required, thus 
reducing the cost of placing such a reader. 

[0236] Furthermore, the electronic payment system of the present invention provides the 
credit card company with the following advantage. The electronic payment system 
using the mobile phone with high security can ensure that electronic money is 
withdrawn from the credit card account, thus preventing unfair use of the withdrawn 
electronic money. Moreover, the use of electronic money can make issue and 



toll road. 



[0234] 



The electronic payment system of the present invention provides the user with the 
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management of the credit cart unnecessary, so that the cost can be reduced. 

[0237] As is apparent from the above, according to the present invention, payment on the 
dealings of goods can be made safely and conveniently by using electronic money. 

[0238] Although the present invention has been described by way of exemplary 

embodiments, it should be understood that those skilled in the art might make many 
changes and substitutions without departing from the spirit and the scope of the 
present invention which is defined only by the appended claims. 
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